Merge branch 'master' of git://git.distorted.org.uk/~mdw/ca

* 'master' of git://git.distorted.org.uk/~mdw/ca:
  lib/func.tcl: Hack output of `openssl dgst -hex'.
  etc/openssl.conf: Allow `keyEncipherment' for TLS clients.

diff --combined etc/openssl.conf
index 1accc801fe2082cd98aa1883b8b33953ceb34732,847b1f5295376605fbbafe4d495e5a851f4061de..1fe673a7fa5e126169c5a80d5b415d3794dc274b
--- 1/etc/openssl.conf
--- 2/etc/openssl.conf
+++ b/etc/openssl.conf
@@@ -5,7 -5,7 +5,7 @@@
  ###--------------------------------------------------------------------------
  ### Defaults.
  
 -RANDFILE = /dev/urandom
 +RANDFILE = /dev/random
  db_suffix =
  
  ###--------------------------------------------------------------------------
@@@ -103,7 -103,7 +103,7 @@@ crlDistributionPoints = URI:http://www.
  
  [tls-client-extensions]
  basicConstraints = critical, CA:FALSE
- keyUsage = critical, digitalSignature
+ keyUsage = critical, digitalSignature, keyEncipherment
  extendedKeyUsage = clientAuth
  subjectKeyIdentifier = hash
  authorityKeyIdentifier = keyid:always,issuer:always